Amendments to the Claims: 

The listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1. (Currently Amended) A computer-implemented method performed on a 
device comprising: 

requesting a desired service through a foreign service provider; 

generating a hash tree and generating a digital signature on a root value of the hash 

tree; 

sending the digital signature and the root value to the foreign service provider as a 
first packet : 

receiving data indicating that the service provider has verified the signature: 
providing one or more tokens to the foreign service provider with the a next packet 

when if the foreign service provider accepts the signature to use the service, wherein the one 

or more tokens are generated using the hash tree : and 

continuing to use the service while the foreign service provider accepts tokens. 

2. (Cancelled) 

3. (Cancelled) 
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4. (Currently Amended) Vse A computer-implemented method of Claim 3 
performed on a device comprising: 

requesting a desired service through a foreign service provider: 
generating a dense hash tree and generating a digital signature on a root value of the 
hash tree, wherein th e hash tr e e comprising a d e ns e hash tr e e, and furth e r comprising 
constructing the dense hash tree is constructed byi[[:]] 

randomly generating a number of bit streams equal to the number of tokens 
that is estimated to be neededi[[;]] 

constructing a binary tree with a number of leaves equal to the number of 
estimated tokens plus one^d;]] 

assigning the random bit strings to the leaves and 

computing values to be assigned to each internal node according to the values 
of children of internal nodes; 

sending the digital signature and the root value to the foreign service provider as a 
first packet: 

receiving data indicating that the service provider has verified the signature: 
providing one or more tokens to the foreign service provider with a next packet when 

if the foreign service provider accepts the signature to use the service, wherein the one or 

more tokens are generated using the hash tree: and 

continuing to use the service while the foreign service provider accepts tokens . 

5. (Original) The method defined m Claim 4 wherein generating a number of bit 
streams comprises generating the number of bits streams from a single seed. 
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6. (Original) The method of Claim 4 wherein the bit strings are of cryptographically 
suitable length. 

7. (Currently Amended) The method of Claim [[3]] i wherein the hash tree is 
one selected from a group consisting of a Merkle tree and a dense hash tree. 

8. (Currently Amended) The method of Claim 1 wh e r e in th e us e r d e vice further 
comprising generatinges the one or more tokens using a public key signature scheme, 
including using a public-key signature to sign the root of the hash tree. 

9. (Original) The method of Claim 1 further comprising generating a digital 
signature on the root of the tree using a private signing key. 

10. (Currently Amended) The method of Claim 1 wherein the user d e vic e 
includ e s in each of the one or more of the tokens includes one or more of a group consisting 
of the identity of the foreign service provider for which tokens are intended, a maximum 
number of tokens that the foreign service provider may receive, and any conditions that the 
foreign service provider must satisfy before it can redeem the token. 

1 1 . (Currently Amended) The method of Claim 1 further comprising sending to 
the foreign service provider a signature on the root value of the hash tree, a public key of the 
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user device and a certificate from a trusted party attesting to a relationship between the user 
and their a home service provider produced from a private key of the home service provider . 

12. (Currently Amended) The method of Claim 1 wherein the one or more tokens 
is an undeniable token. 

13. (Currently Amended) The method of Claim 1 wherein generating the hash 
tree further comprises comprising : 

generating a dense hash tree; 

providing the root value to a home service provider for signature; 

informing the home service provider of the a monetary value of the dense hash tree; 

and 

providing payments based on the tree to the foreign service provider. 

14. (Currently Amended) An apparatus comprising: 

an external network interface through which a request for a desired service of a 
foreign service provider is made; 

a memory; 

a processor coupled to the external network interface and the memory, wherein the 
processor to generate[[s]] a hash tree and generate[[s]] a digital signature on a root value of 
the hash tree using the memory, and ftirther wherein the processor to send[[s]] the digital 

signature and the root value to the foreign service provider as a first packet , via the external 
network interface, along with one or more tokens with ^ a next packet if when the foreign 
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service provider accepts the signature for use of the service , and continue [[s]] to use the 
service while the foreign service provider accepts tokens , wherein the one or more tokens are 
generated using the hash tree . 

15. (Currently Amended) The apparatus of Claim 14 further comprising a user 
device to generateiftg the one or more tokens. 

1 6. (Currently Amended) The apparatus of Claim 1 5 wherein the user device to 
generate[[s]] tokens using the hash tree. 

1 7. (Original) The apparatus of Claim 16 wherein the hash tree is one selected from a 
group consisting of a Merkle tree and a dense hash tree. 

18. (Currently Amended) The apparatus of Claim 1 4 wherein the processor to 
generate[[s]] the one or more tokens using a public key signature scheme, including using a 
public-key signature to sign the root of the hash tree. 

19. (Original) The apparatus of Claim 14 wherein the processor includes in each of 
the one or more of the tokens one or more of a group consisting of the identity of the foreign 
service provider for which tokens are intended, a maximum number of tokens that the foreign 
service provider may receive, and any conditions that the foreign service provider must 
satisfy before it can redeem the token. 
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20. (Currently Amended) The apparatus of Claim 14 wherein the processor 
causes a signature on the root value of the hash tree, a public key of the user device and a 
certificate from a trusted party attesting to a relationship between the user and #ieir a home 
service provide r, produced from a private key of the home service provider, to the foreign 
service provider via the external network interface. 

21 . (Original) The apparatus of Claim 14 wherein the token is an undeniable token. 

22. (Currently Amended) The apparatus of Claim 14 wherein the processor 
provides a root value of a dense hash tree to a home service provider for signature and 
informs the home service provider of #ie a monetary value of the dense hash tree to enable 
the home service provider to pay the foreign service provider for the service. 

23. (Currently Amended) An apparatus comprising: 

means for requesting a desired service through a foreign service provider; 
means for generating a hash tree and generating a digital signature on a root value of 
the hash tree; 

means for sending the digital signature and the root value to the foreign service 
provide r as a first packet : 

means for receiving data indicating that the service provider has verified the 
signature: 
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means for providing one or more tokens to the foreign service provider with the a 
next packet when if the foreign service provider accepts the signature to use the service, 
wherein the one or more tokens are generated using the hash tree : and 

means for continuing to use the service while the foreign service provider accepts 

tokens. 

24. (Currently Amended) An article of manufacture having one or more 
recordable media storing instructions thereon which, when executed by a system, cause the 
system to perform a method comprising: 

requesting a desired service through a foreign service provider; 

generating a hash tree and generating a digital signature on a root value of the hash 

tree; 

sending the digital signature and the root value to the foreign service provide r as a 
first packet ; 

receiving data indicating that the service provider has verified the signature: 
providing one or more tokens to the foreign service provider with ^ a next packet 

when if the foreign service provider accepts the signature to use the service, wherein the one 

or more tokens are generated using the hash tree ; and 

continuing to use the service while the foreign service provider accepts tokens. 

25.-54. (Cancelled) 
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